Protection begins with purpose
KiloDrive documents why information is needed, who controls it, where it is stored, who may receive it, and when it should be deleted or anonymized. A feature should not collect sensitive information merely because it may be useful later.
Country and tenant boundaries
Global identity and security data is separated from country operations. Each cell applies its currency, timezone, service, retention, verification, and legal configuration. Privileged access requires validated tenant and acting-country context.
Safeguards
- Encrypted transport, protected secrets, asymmetric signing, and key rotation
- Argon2id password hashing, optional passkeys and 2FA, step-up proof, limits, and session controls
- Private document storage, upload quarantine and scanning, signed access, and access logs
- Redacted logs, audit events, monitoring, backups, recovery, and incident response
- Idempotent money operations, immutable journals, reconciliation, held balances, and fraud review
Location and journey data
Active-trip location is limited to navigation, rider progress, reconstruction, safety, and configured fraud purposes. Visible indicators explain background collection; sharing links are scoped and time-limited; collection stops when the assignment ends. See the Privacy Policy.
Retention, deletion, and legal holds
Retention reflects purpose, safety and disputes, statutory duties, limitation periods, and jurisdiction rules. Deletion removes or anonymizes eligible information while required financial, fraud, safety, and legal records may remain. Valid legal holds suspend deletion for affected evidence.
Your rights
Depending on law, users may request access, correction, export, deletion, restriction, objection, consent withdrawal, marketing opt-out, or human review. KiloDrive verifies the requester and explains lawful refusals.
Providers and incidents
Providers receive only what their role needs and remain subject to contractual, access, transfer, health, and recovery controls. Incidents follow containment, evidence preservation, assessment, recovery, lessons learned, and required notification.
Use Contact Us or email [email protected].